Machine and User accounts are getting automatically wiped from EEM.

Hi,

I have recently done OS migration of EEM/EEPC from 2003 32bit to 2008 32bit. Migration was successfully but after 5 days i had been reported with an issue with Error [db010010]: Object not found on client machine. i checked machine id on database but it was black in EEM. I checked machine in all groups, orphaned objects an in deleted machines but machine was not existed.

i again created a new installation pack and installed on some testing machines with new user account. No issue found, but again after 2 days machines ID was not existed in database. And when i checked for user account is was not there too.

I noticed one more weird thing that when i was installing new pack on client, it was generating machine id but with duplicate entry of id and machine name.

I believed, database got broken for that particular machine group and i created new machine group and started moving machines from old group to thins new group. On a sudden after two days, around 30 machined were wiped out from database. Now total wiped machine count is near 60. I am afraid if this gonna increase this count.

work out the machine ID, then go look in the physical database for that machines folder.

If it's marked as .rmv then someone (or some script) deleted it. If it's marked as .wpe, then something deleted it and purged it from the recycle bin. If the folder simply does not exist, then something outside of EEM is touching the database (which is forbidden).

That should give you a clue as to what's going on.

You should be able to restore these machines from your DB backup, once you've worked out if they are removed or wiped etc.

yes, if something is cleared from the bin, it changes from .rmv to .wpe.

If you have an audit log that an admin is deleting the machines, then either the person is, or some script is logging on as that user and doing it. No, the server won't delete things on its own - it never needs to.

Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.